httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe, Jr." <wr...@rowe-clan.net>
Subject Re: Fwd: [users@httpd] encoded slashes in the url with AllowEncodedSlashes
Date Thu, 03 Jul 2008 15:59:33 GMT
Eric Covener wrote:
> 
> Bill: I saw your veto in the biug below, would that apply to restoring
> the original behavior of AllowEncodedSlashes as well or just the
> approach in one of the patches?
> 
> https://issues.apache.org/bugzilla/show_bug.cgi?id=35256

I have an interesting idea...

combine the decode and the get_parents, such that only an encoded slash
would have the text value "//" and only an encoded backslash would have
the value "\\"  It would then be up to the proxy to forward the original
URI value or up to the file system to reject such constructs.

It needs fleshing out, but these are canonically unique values after the
string has had get_parents applied.  Thoughts?

Mime
View raw message